Do the following:

1. Log on to the OfficeScan server management console.
    

   Make sure that the affected client is connected to the server so that it can receive the configuration changes.

    
2. Go to Networked Computers > Client Management.
   (For OSCE 11.0 & XG, go to Agents > Agent Management.)
3. Select or highlight the affected client(s) and then click Settings > Real-time Scan Settings > Target tab.
4. Under the User Activity on Files section, set Scan file being: to created/modified.
5. Click Save.
6. To verify if the clients received the changes, check if the "ScanOutgoing" registry key is set to "0".
    

   Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.

    

   Go to: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration

   "ScanIncoming"=dword:00000001
   "ScanOutgoing"=dword:00000000

If the issue persists, collect the CDT logs from the affected client(s) and contact Trend Micro Technical Support.